$ rpki-client -vvf rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft File: TDScUcpZiQfVwHyx8khR_ASNrRo.mft (raw, json) Hash identifier: nw0AEQiUpGd4KSJ9DkbcHSuXVW6GJDQvmDeDz0h5yuA= Subject key identifier: 9B:A6:D3:6F:04:CF:FD:45:95:18:E0:E5:27:FE:96:29:B8:45:5F:05 Authority key identifier: 4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A Certificate issuer: /CN=A9171A1B/serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Certificate serial: 07C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft Manifest number: 07A5 Signing time: Sun 26 Jul 2026 22:14:06 +0000 Manifest this update: Sun 26 Jul 2026 22:14:06 +0000 Manifest next update: Sun 02 Aug 2026 22:14:06 +0000 Files and hashes: 1: TDScUcpZiQfVwHyx8khR_ASNrRo.crl (hash: k6c2dbd2z8jQH+8GVXHJVsTmlSHEAtRbglsXskd4FmQ=) 2: 9F00C9325C6111EB9FAD600FC4F9AE02.roa (hash: AVHjOo/UrE4RIu/UGGKNS+wB7XI6SMjM5Z9Qu4YFYdc=) 3: FDA3EFA45C6211EB91658215C4F9AE02.roa (hash: 2oVR2t5v2J8c0h/gxceBEyWV3OdTw+s6Iy45bTBQMQ0=) 4: 34CC285A5C6011EB80D50F0CC4F9AE02.roa (hash: y9iPf5uYx69ejY3kwl7gRifI2qQ+lUK4vj5z1o6EqvE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Aug 2026 22:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1989 (0x7c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171A1B, serialNumber=4C349C51CA598907D5C07CB1F24851FC048DAD1A Validity Not Before: Jul 26 22:14:06 2026 GMT Not After : Aug 2 22:14:06 2026 GMT Subject: CN=6a6686ae-fc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:da:85:85:20:b1:bb:81:c9:86:15:6f:29: 7f:6e:8e:3b:7c:33:5a:e3:74:a8:74:8c:58:9c:4b: 43:04:d6:34:8b:9e:af:d2:37:1e:63:ae:0e:ce:53: c0:b6:15:7b:9e:85:d4:11:89:88:28:33:1f:55:cf: c0:08:5b:6f:78:9f:92:88:e0:9d:36:52:cc:62:cb: 93:e5:bf:36:4f:be:75:6b:b8:97:20:d6:ec:2b:ab: a0:43:0f:4b:2d:1f:72:49:e6:62:8e:b8:e3:8a:14: 65:81:9d:6c:6e:f4:dd:42:a5:ab:5c:8c:ca:42:b0: 68:69:41:57:67:ab:8f:95:5d:d4:26:e2:c4:fa:eb: dc:78:38:16:ba:15:d1:99:9b:47:6f:65:c6:7f:d5: c6:f3:dc:13:fd:dd:73:f0:7f:9e:f5:5b:96:20:a0: cc:5a:29:08:c4:58:5f:5c:86:e3:2a:ad:75:42:08: de:74:00:69:43:6b:0a:e4:06:e8:2e:9a:f6:6d:76: 6b:cf:3d:55:9f:40:1d:19:57:0c:a6:f6:c4:2e:58: 7a:c2:1d:7c:8c:5b:71:cd:72:6c:0a:bd:a9:5c:ca: b0:fe:03:52:28:32:49:5b:95:e2:74:77:27:03:6c: f6:fb:1d:0c:0e:9e:a7:00:e2:ee:37:e6:e1:6b:aa: c3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A6:D3:6F:04:CF:FD:45:95:18:E0:E5:27:FE:96:29:B8:45:5F:05 X509v3 Authority Key Identifier: keyid:4C:34:9C:51:CA:59:89:07:D5:C0:7C:B1:F2:48:51:FC:04:8D:AD:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TDScUcpZiQfVwHyx8khR_ASNrRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171A1B/DC58CC5A5C4111EB81D7C60BC4F9AE02/TDScUcpZiQfVwHyx8khR_ASNrRo.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5d:1e:6c:58:42:2d:83:82:20:9d:8e:25:ef:37:f4:31:93: a9:50:62:8c:35:58:5f:14:66:0a:eb:37:04:3a:4b:1e:bc:0d: dc:35:b0:ce:4a:35:d0:57:2f:39:94:54:f0:1d:33:49:ca:78: 09:01:32:ed:e3:28:9d:43:78:76:9e:59:03:f8:a0:03:ea:cf: b8:f1:67:c9:43:25:0f:d5:ca:31:13:96:ad:af:ff:11:a9:77: a4:9a:51:82:a8:c5:fd:17:4e:fb:a0:ff:4f:c9:b2:6d:b8:66: 93:3a:8f:c3:0b:f3:18:13:dd:49:b5:07:91:2e:93:fc:06:7f: 11:c9:5b:25:15:df:80:6e:25:48:8f:e3:99:45:d2:fe:1e:48: 79:a7:a0:95:98:96:df:c6:f2:8d:5e:c6:61:8e:79:80:f3:c6: fa:f7:df:f9:5c:ac:4e:5c:9a:4f:66:cf:17:83:24:44:0c:a9: 33:88:45:4d:2e:e9:ff:8a:9e:f3:5b:bd:23:af:d4:62:57:82: c5:b9:9b:6f:cc:f5:51:91:b7:e6:62:54:55:5b:a7:25:91:f2: f2:98:fb:13:eb:28:15:2c:6e:26:ea:b1:65:be:98:fa:95:d8: 94:05:fc:c7:c7:43:b5:cf:a5:d6:b4:67:08:d9:6f:b1:25:17: 5c:18:89:02 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICB8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzFBMUIxMTAvBgNVBAUTKDRDMzQ5QzUxQ0E1OTg5MDdENUMwN0NCMUYyNDg1MUZD MDQ4REFEMUEwHhcNMjYwNzI2MjIxNDA2WhcNMjYwODAyMjIxNDA2WjAYMRYwFAYD VQQDEw02YTY2ODZhZS1mYzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApwPahYUgsbuByYYVbyl/bo47fDNa43SodIxYnEtDBNY0i56v0jceY64OzlPA thV7noXUEYmIKDMfVc/ACFtveJ+SiOCdNlLMYsuT5b82T751a7iXINbsK6ugQw9L LR9ySeZijrjjihRlgZ1sbvTdQqWrXIzKQrBoaUFXZ6uPlV3UJuLE+uvceDgWuhXR mZtHb2XGf9XG89wT/d1z8H+e9VuWIKDMWikIxFhfXIbjKq11QgjedABpQ2sK5Abo Lpr2bXZrzz1Vn0AdGVcMpvbELlh6wh18jFtxzXJsCr2pXMqw/gNSKDJJW5XidHcn A2z2+x0MDp6nAOLuN+bha6rDtwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJum028E z/1FlRjg5Sf+lim4RV8FMB8GA1UdIwQYMBaAFEw0nFHKWYkH1cB8sfJIUfwEja0a MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MUExQi9EQzU4Q0M1QTVD NDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlRZlZ3SHl4OGtoUl9BU05y Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1REU2NVY3BaaVFmVndIeXg4a2hSX0FTTnJSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MUExQi9EQzU4Q0M1QTVDNDExMUVCODFEN0M2MEJDNEY5QUUwMi9URFNjVWNwWmlR ZlZ3SHl4OGtoUl9BU05yUm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEALl0ebFhCLYOCIJ2OJe839DGTqVBijDVYXxRmCus3BDpLHrwN3DWwzko10Fcv OZRU8B0zScp4CQEy7eMonUN4dp5ZA/igA+rPuPFnyUMlD9XKMROWra//Eal3pJpR gqjF/RdO+6D/T8mybbhmkzqPwwvzGBPdSbUHkS6T/AZ/EclbJRXfgG4lSI/jmUXS /h5IeaeglZiW38byjV7GYY55gPPG+vff+VysTlyaT2bPF4MkRAypM4hFTS7p/4qe 81u9I6/UYleCxbmbb8z1UZG35mJUVVunJZHy8pj7E+soFSxuJuqxZb6Y+pXYlAX8 x8dDtc+l1rRnCNlvsSUXXBiJAg== -----END CERTIFICATE-----Generated at Tue Jul 28 20:56:12 2026 by rpki-client